| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Revision 1.45.2.23:
Changed output so all debug output goes to stderr, and all file processing
goes to stdout.
Note: This change permits use of testparm processing of smb.conf to be
redirected into a file that can be used as an smb.conf file. ie: All
information that should not be in smb.conf will be on stderr, all pertinent
smb.conf info will go to stdout.
Example of use:
A fully documented smb.conf.master file can be maintained.
To create smb.conf do:
testparm -s > smb.conf
(This used to be commit f323b932f932a576d42a018a3e16b45758121891)
|
| |
| |
| |
| | |
(This used to be commit 512a81c9fd4490cb6f9b1cc88cdb9238d21decb1)
|
| |
| |
| |
| |
| |
| |
| | |
Revision 1.2.2.5:
Remove some unused variables uncovered by the build farm.
(This used to be commit c0585399ac3b6adb22b514478ba44e3c8a96b050)
|
| |
| |
| |
| | |
(This used to be commit 3cd8acb6c362bca82d7268aa283d3f6360b24604)
|
| |
| |
| |
| | |
(This used to be commit 160903f99782673a3ff147450d33f4a4ff88a666)
|
| |
| |
| |
| | |
(This used to be commit c00bd547c875a1eba3b8c427f4fed0b61ae987c5)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
- Revision 1.468.2.187
CP* modules are not related to development
- Revision 1.468.2.191
Compile fix for tdbbackup when Samba needs to override non-C99
compliant implementations of snprintf
Sync up formatting for PAM_WINBIND_PICOBJ variable.
(This used to be commit b4f3c8d2f62e6d75a5c01529190e71289dea8df5)
|
| |
| |
| |
| | |
(This used to be commit 5f9fe8304f037f91fa765e64580a7119aeb201dd)
|
| |
| |
| |
| |
| |
| |
| | |
<adegremont@idealx.com>
Jeremy.
(This used to be commit a92555e6060294afcfecc075bfac5c836f150b01)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
GUID has been removed. If you are dealing with a flattened version of a
[gu]uid, use UUID_FLAT. smb_pack_uuid and smb_unpack_uuid will switch
between the two.
I'm not sure exactly what the genparse stuff is doing here, so I just
switched it to a UUID_FLAT (no functional change), but I suspect this
may not be the right way to go.
(This used to be commit 001e9d0e814109a26d598001b3c23dfdb04510ff)
|
| |
| |
| |
| | |
(This used to be commit 0e8fcfac702515f8870c979262bf881d1155efdc)
|
| |
| |
| |
| |
| |
| |
| |
| | |
Takes care of secdescs.
Had to move the uuid marshall/unmarshalling code to parse_misc, because
it's needed outside of parse_rpc.c (for no-auth calls)
(This used to be commit 5d2bb079b65ccfec14604d8dcf0ce789d1795b46)
|
| |
| |
| |
| |
| |
| | |
Printer publishing now uses struct uuid. Also changes ads_pull_guid to
unpack it from the wire format.
(This used to be commit 671b434cc4b422144ab8f5858ae9c2179de701e1)
|
| |
| |
| |
| |
| | |
Takes care of the lsass pipe
(This used to be commit 3dca3efa4b427fa3094a8cd392fe5744b5f6f6a8)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This eliminates RPC_UUID. It creates the following struct:
struct uuid
{
uint32 time_low;
uint16 time_mid;
uint16 time_hi_and_version;
uint8 clock_seq[2];
uint8 node[6];
};
which replaces RPC_UUID and various random struct uuid definitions
and a flat version:
#define UUID_FLAT_SIZE 16
typedef struct uuid_flat
{
uint8 info[UUID_FLAT_SIZE];
} UUID_FLAT;
which pretty much looks like GUID (which I will start eliminating).
I want us to use the FLAT one only on the wire (perhaps in files, too?), and
I want it to be obvious to the coder that it is the FLAT version.
This leaves a couple of compiler warnings, where GUID isn't completely
replaced by FLAT_UUID yet...I'll get to those soon.
(This used to be commit 1532b5d2e3c61df232b16394acedf6eac387588b)
|
| |
| |
| |
| | |
(This used to be commit 2cc43e760b02f2088a0222d1f5080913a96f3e5a)
|
| |
| |
| |
| |
| | |
Jeremy.
(This used to be commit 8d29faaa6396a46e8754ead32f6fd545e567ba46)
|
| |
| |
| |
| |
| |
| | |
parameterise the listen backlog in smbd and make it larger by default. A backlog of 5 is way too small these days.
Jeremy.
(This used to be commit 58b8f673945ad114d056dd79f509c93ab42b96d1)
|
| |
| |
| |
| |
| | |
Jeremy.
(This used to be commit 124a8ddae63adff4f601242a8e6d05abcaf4d9bf)
|
| |
| |
| |
| |
| |
| |
| | |
returned.
Jeremy.
(This used to be commit a7561336e770405572c13a4607b0e808225e8916)
|
| |
| |
| |
| |
| | |
Jeremy.
(This used to be commit cbefb5c4f983ca49fcc563111d8704d3770daf81)
|
| |
| |
| |
| | |
(This used to be commit 65a4c2aa0af4572ef7da0f7907ee144faba39031)
|
| |
| |
| |
| |
| |
| |
| | |
<a.bokovoy@sam-solutions.net>.
Jeremy.
(This used to be commit f714998b44c6a1082943a399ce3b0ce316efc3a0)
|
| |
| |
| |
| |
| | |
Jeremy.
(This used to be commit 2186cbf28db496b97b39b81eb1932690c6094cd8)
|
| |
| |
| |
| |
| |
| |
| |
| | |
winreg pipe if it doesn't work. Fixes bug #534.
I will go back and add the same logic for the shutdown itself, even though
that works so far against win2k (haven't tested all win clients).
(This used to be commit e6d02117755d92d1b5ce029bf659d0fbe1a55585)
|
| |
| |
| |
| |
| | |
#534
(This used to be commit 99f4fa54497ba1c0fc0ba39d51b3ce201a8e6cd2)
|
| |
| |
| |
| |
| | |
obsolete comment by Luke Leighton.
(This used to be commit 316f83add76b56fe102f5dc4c9ce3a0413d9a1f4)
|
| |
| |
| |
| | |
(This used to be commit 25aa5df5c79070d0f1273a71617e64fba7831742)
|
| |
| |
| |
| |
| |
| |
| | |
human-readable format.
Volker
(This used to be commit 4e3a2eb8e04c3a669d94e38d81e994606fa6ef9d)
|
| |
| |
| |
| |
| | |
Volker
(This used to be commit 94860687c535ace0c962ca3fe7da59df05325c62)
|
| |
| |
| |
| |
| |
| | |
if the file has an ACL.
Jeremy.
(This used to be commit 7bf5ed30ce74ba658ca35059955748c1d8cbd6d2)
|
| |
| |
| |
| | |
(This used to be commit df14b0af31863680218b06ae9de2f010a38fba6e)
|
| |
| |
| |
| | |
(This used to be commit 92a138f027cf2f1c2b13c6f3d59493fb21885d5e)
|
| |
| |
| |
| |
| |
| |
| |
| | |
The changes the name of the job passed off to cups
from "Test Page" to "smbprn.00000033 Test Page" so that
we can get the smb jobid back from lpq. Working on bug
770.
(This used to be commit 5979f4d645e84fb22223e6cbf0043f2fa21acb2f)
|
| |
| |
| |
| |
| |
| | |
it fails later. Only turn it off automatically if it fails at the start.
Jeremy.
(This used to be commit 4a145531c2b6353291cd25f14f5572aa31e86594)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
defaults specified by the caller to prevail.
Don't use NTLM2 for RPC pipes, until we know how it works in signing or sealing.
Call ntlmssp_sign_init() unconditionally in the client - we setup the
session key, why not setup the rest of the data.
Andrew Bartlett
(This used to be commit 48123f7e42c3fde85887de23c80ceee04c2f6281)
|
| |
| |
| |
| |
| | |
Jeremy.
(This used to be commit 0f2a50316d8245ea9c441f0ea08e1a0fd9a92583)
|
| |
| |
| |
| |
| |
| | |
ignore it. Only fail if signing is set to "required".
Jeremy.
(This used to be commit 8916ddfc39c3e70265188926f24034152f0e7b6b)
|
| |
| |
| |
| |
| |
| | |
check_bind_response()
(This used to be commit 5e062f72baad6f7a70f1a3c8cf190535ccacc89e)
|
| |
| |
| |
| |
| | |
Jeremy.
(This used to be commit 16097f2072085432f4c669d9e008023f36f7afbb)
|
| |
| |
| |
| |
| |
| | |
originating client name when using CUPS
(This used to be commit 71333299a6e6bc6d74d2172f71e3fe21ef75aa3c)
|
| |
| |
| |
| | |
(This used to be commit 68283407e0f366d8315f4be6caed67eb6fe84b85)
|
| |
| |
| |
| |
| |
| |
| | |
free() each auth method. (We had relied on the use of talloc() only, despite providing the free() callback)
Andrew Bartlett
(This used to be commit 5872c0e26e3407c7c1dcf2074a36896a3ca1325a)
|
| |
| |
| |
| |
| |
| |
| | |
DES based krb5 logins).
Andrew Bartlett
(This used to be commit 240b0d178e1b4a3556207bdf2e342c70155f64ee)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This means that we now support 'net rpc join' with KRB5 (des based)
logins. Now, you need to hack 'net' to do that, but the principal is
important...
When we add kerberos to 'net rpc', it should be possible to still do
user management and the like over RPC.
(server-side support to follow shortly)
Andrew Bartlett
(This used to be commit 9ecf9408d98639186b283f1acf0fac46417547d0)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
- NTLM2 support in the server
- KEY_EXCH support in the server
- variable length session keys.
In detail:
- NTLM2 is an extension of NTLMv1, that is compatible with existing
domain controllers (unlike NTLMv2, which requires a DC upgrade).
* This is known as 'NTLMv2 session security' *
(This is not yet implemented on the RPC pipes however, so there may
well still be issues for PDC setups, particuarly around password
changes. We do not fully understand the sign/seal implications of
NTLM2 on RPC pipes.)
This requires modifications to our authentication subsystem, as we
must handle the 'challege' input into the challenge-response algorithm
being changed. This also needs to be turned off for
'security=server', which does not support this.
- KEY_EXCH is another 'security' mechanism, whereby the session key
actually used by the server is sent by the client, rather than being
the shared-secret directly or indirectly.
- As both these methods change the session key, the auth subsystem
needed to be changed, to 'override' session keys provided by the
backend.
- There has also been a major overhaul of the NTLMSSP subsystem, to merge the 'client' and 'server' functions, so they both operate on a single structure. This should help the SPNEGO implementation.
- The 'names blob' in NTLMSSP is always in unicode - never in ascii.
Don't make an ascii version ever.
- The other big change is to allow variable length session keys. We
have always assumed that session keys are 16 bytes long - and padded
to this length if shorter. However, Kerberos session keys are 8 bytes
long, when the krb5 login uses DES.
* This fix allows SMB signging on machines not yet running MIT KRB5 1.3.1. *
- Add better DEBUG() messages to ntlm_auth, warning administrators of
misconfigurations that prevent access to the privileged pipe. This
should help reduce some of the 'it just doesn't work' issues.
- Fix data_blob_talloc() to behave the same way data_blob() does when
passed a NULL data pointer. (just allocate)
REMEMBER to make clean after this commit - I have changed plenty of data structures...
(This used to be commit f3bbc87b0dac63426cda6fac7a295d3aad810ecc)
|
| |
| |
| |
| | |
(This used to be commit 879d0f15ea260d61c56c5b841065ecb2f5ec26ca)
|
| |
| |
| |
| | |
(This used to be commit e374ce779efaec001c1476e0710ceaa9c3b84e8d)
|
| |
| |
| |
| |
| |
| | |
running; bug 398
(This used to be commit 04e37283f230b28f3019bfab3a71dde5e4ae4e23)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
are written out surrounded by single quotes. This means that
both double and single quotes are now used to surround
strings in smb.conf. This is a slight change from the previous
behavior but needed or else things like
printer admin = +ntadmin, 'VALE\Domain, Admin'
get written to smb.conf by SWAT.
(This used to be commit 5bf91c79d620e34ac71d72c80f74e47754d49dcb)
|